Current Investigation

I have taken a deep interest in investigative reporting, and in anticipation of applying for future opportunities I am expected to cover some stories that take some investigative digging. This is my workspace, of sorts. I start out with an investigation of my own potential hacking. You’re welcome to follow along, for if anything does come of it, it is one avenue that journalists are vulnerable to government snooping.

I cannot access my account credentials. I cannot save passwords. I note my account is AAD joined, but I am a single user. I run a diagnostic tool …

Log Name:      Application
Source:        .NET Runtime
Date:          9/20/2018 6:13:16 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      HOMECONSUMER
Description:
Application: mmc.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.InvalidOperationException
at System.Windows.Forms.ListView.InsertItemsNative(Int32 index, ListViewItem[] items)
at System.Windows.Forms.ListView.InsertItems(Int32 displayIndex, ListViewItem[] items, Boolean checkHosting)
at System.Windows.Forms.ListView.ListViewNativeItemCollection.Add(ListViewItem value)
at System.Windows.Forms.ListView.ListViewItemCollection.Add(ListViewItem value)
at Microsoft.Windows.ManagementUI.CombinedControls.EventHomeControl.UpdateRecentViewsListViewUI(ArrayList recentViewsDataList)
at Microsoft.EventViewer.SnapIn.EventViewerHomepage.ForwardedRootNodeNotification(Object sender, NotifyRootNodeEventArgs args)
at Microsoft.EventViewer.SnapIn.MMCRootNode.RootNodeNotification(Object sender, NotifyRootNodeEventArgs args)
at Microsoft.Windows.ManagementUI.CombinedControls.EventsNode.FireNotifyRootNodeEvent(Object sender, NotifyRootNodeEventArgs args)
at Microsoft.Windows.ManagementUI.CombinedControls.EventsNode.UpdateRecentViews(EventNodeType nodeType, Int64 ticks, MmcNodePath nodePath, String channelPath)
at Microsoft.EventViewer.SnapIn.FormControlBase.OnFormShow()
at Microsoft.EventViewer.SnapIn.FormViewEx.OnShow()
at Microsoft.ManagementConsole.View.ProcessNotification(Notification notification)
at Microsoft.ManagementConsole.ViewMessageClient.ProcessNotification(Notification notification)
at Microsoft.ManagementConsole.Internal.IMessageClient.ProcessNotification(Notification notification)
at Microsoft.ManagementConsole.Executive.SnapInNotificationOperation.ProcessNotification()
at Microsoft.ManagementConsole.Executive.Operation.OnThreadTransfer(SimpleOperationCallback callback)
Exception Info: System.Reflection.TargetInvocationException
at Microsoft.ManagementConsole.Executive.MmcThreadMessageWindow.OnThreadException(Exception e)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)
at System.Windows.Forms.UnsafeNativeMethods.DispatchMessageW(MSG& msg)
at System.Windows.Forms.Application.ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr dwComponentID, Int32 reason, Int32 pvLoopData)
at System.Windows.Forms.Application.ThreadContext.RunMessageLoopInner(Int32 reason, ApplicationContext context)
at System.Windows.Forms.Application.ThreadContext.RunMessageLoop(Int32 reason, ApplicationContext context)
at Microsoft.ManagementConsole.Internal.SnapInMessagePumpProxy.Microsoft.ManagementConsole.Internal.ISnapInMessagePumpProxy.Run()
at Microsoft.ManagementConsole.Internal.ISnapInMessagePumpProxy.Run()
at Microsoft.ManagementConsole.Executive.SnapInThread.OnThreadStart()
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
at System.Threading.ThreadHelper.ThreadStart()
Event Xml:
<Event xmlns=”http://schemas.microsoft.com/win/2004/08/events/event”>
<System>
<Provider Name=”.NET Runtime” />
<EventID Qualifiers=”0″>1026</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime=”2018-09-21T01:13:16.866117300Z” />
<EventRecordID>20195</EventRecordID>
<Channel>Application</Channel>
<Computer>HOMECONSUMER</Computer>
<Security />
</System>
<EventData>
<Data>Application: mmc.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.InvalidOperationException
at System.Windows.Forms.ListView.InsertItemsNative(Int32 index, ListViewItem[] items)
at System.Windows.Forms.ListView.InsertItems(Int32 displayIndex, ListViewItem[] items, Boolean checkHosting)
at System.Windows.Forms.ListView.ListViewNativeItemCollection.Add(ListViewItem value)
at System.Windows.Forms.ListView.ListViewItemCollection.Add(ListViewItem value)
at Microsoft.Windows.ManagementUI.CombinedControls.EventHomeControl.UpdateRecentViewsListViewUI(ArrayList recentViewsDataList)
at Microsoft.EventViewer.SnapIn.EventViewerHomepage.ForwardedRootNodeNotification(Object sender, NotifyRootNodeEventArgs args)
at Microsoft.EventViewer.SnapIn.MMCRootNode.RootNodeNotification(Object sender, NotifyRootNodeEventArgs args)
at Microsoft.Windows.ManagementUI.CombinedControls.EventsNode.FireNotifyRootNodeEvent(Object sender, NotifyRootNodeEventArgs args)
at Microsoft.Windows.ManagementUI.CombinedControls.EventsNode.UpdateRecentViews(EventNodeType nodeType, Int64 ticks, MmcNodePath nodePath, String channelPath)
at Microsoft.EventViewer.SnapIn.FormControlBase.OnFormShow()
at Microsoft.EventViewer.SnapIn.FormViewEx.OnShow()
at Microsoft.ManagementConsole.View.ProcessNotification(Notification notification)
at Microsoft.ManagementConsole.ViewMessageClient.ProcessNotification(Notification notification)
at Microsoft.ManagementConsole.Internal.IMessageClient.ProcessNotification(Notification notification)
at Microsoft.ManagementConsole.Executive.SnapInNotificationOperation.ProcessNotification()
at Microsoft.ManagementConsole.Executive.Operation.OnThreadTransfer(SimpleOperationCallback callback)
Exception Info: System.Reflection.TargetInvocationException
at Microsoft.ManagementConsole.Executive.MmcThreadMessageWindow.OnThreadException(Exception e)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)
at System.Windows.Forms.UnsafeNativeMethods.DispatchMessageW(MSG&amp; msg)
at System.Windows.Forms.Application.ComponentManager.System.Windows.Forms.UnsafeNativeMethods.IMsoComponentManager.FPushMessageLoop(IntPtr dwComponentID, Int32 reason, Int32 pvLoopData)
at System.Windows.Forms.Application.ThreadContext.RunMessageLoopInner(Int32 reason, ApplicationContext context)
at System.Windows.Forms.Application.ThreadContext.RunMessageLoop(Int32 reason, ApplicationContext context)
at Microsoft.ManagementConsole.Internal.SnapInMessagePumpProxy.Microsoft.ManagementConsole.Internal.ISnapInMessagePumpProxy.Run()
at Microsoft.ManagementConsole.Internal.ISnapInMessagePumpProxy.Run()
at Microsoft.ManagementConsole.Executive.SnapInThread.OnThreadStart()
at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
at System.Threading.ThreadHelper.ThreadStart()
</Data>
</EventData>
</Event>